Automated risk assessment module with real-time compliance monitoring

A computing system comprising:

• processing hardware;
• and
• a non-transitory computer-readable medium communicatively coupled to the processing hardware, wherein the processing hardware is configured for executing instructions stored in the non-transitory computer-readable medium and thereby performing operations comprising:
• providing a multi-tenant computing platform having a tenant authorized for use by a client computing system;
• identifying, based on input to the client computing system, a set of risks associated with operations using the client computing system;
• determining that a software configuration has been implemented to monitor a state of data applicable to a set of control operations associated with the set of risks;
• performing a risk assessment operation that comprises determining that the state of the data tracked via the software configuration indicates evidence collection for the set of control operations;
• and
• providing, via the tenant, an evidence task interface comprising:
• an indication of required evidence for an evidence task corresponding to a control operation of the set of control operations;
• and
• an interface element configured for viewing or modifying the evidence task corresponding to the control operation.

A non-transitory computer-readable medium storing instruction that, when executed by processing hardware, configure the processing hardware to

• perform operations comprising:
• performing, with the processing hardware of a computing system, operations comprising:
• establishing a session between a server computing system and a client computing system;
• accessing, in connection with the session, mapping data that links a set of risks associated with operations using the client computing system to a set of control operations according to a set of objectives identified via an objective identification interface;
• associating, based on the mapping data, the set of risks and the set of control operations with the client computing system;
• determining that a software configuration has been implemented to monitor a state of data applicable to the set of control operations;
• performing a risk assessment operation that comprises determining that the state of the data tracked via the software configuration indicates evidence collection for the set of control operations;
• and
• providing, via the session and based on the risk assessment operation, an evidence task interface comprising:
• an indication of required evidence for an evidence task corresponding to a control operation of the set of control operations;
• and
• an interface element configured for viewing or modifying the evidence task corresponding to the control operation.